
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier: D4XJIQVKFQ80Jop/598V8gKn+g//EGkhUJXSNZe//PY=
Subject key identifier: A1:6E:9E:65:CF:54:41:F7:C2:CC:29:FB:46:B8:D7:DB:E8:B9:1A:D4
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number: A3
Signing time: Sun 01 Mar 2026 08:34:09 +0000
Manifest this update: Sun 01 Mar 2026 08:34:08 +0000
Manifest next update: Sun 08 Mar 2026 08:34:08 +0000
Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: fDEEjA7s2yQ4fmSwUvZF+azMve+L3gvsBm47CPrjEn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Validity
Not Before: Mar 1 08:34:08 2026 GMT
Not After : Mar 8 08:34:08 2026 GMT
Subject: CN=69a3fa00-125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:b4:3f:fc:07:6e:79:93:8d:a0:a9:92:2e:
9b:27:7b:b9:f9:10:b1:a2:56:ad:cf:ff:05:d5:12:
20:79:2a:28:e7:7c:bd:83:92:10:cd:65:f4:07:1c:
80:53:d6:be:70:9b:46:e5:37:b1:23:07:04:1c:f7:
fd:97:d6:62:08:1b:e7:11:18:48:fb:ae:da:ee:3f:
87:df:3e:52:db:ed:99:67:dd:1f:22:2c:65:f6:c1:
33:b3:fd:b3:8f:74:f5:91:6e:e1:68:cc:14:a7:de:
bb:1e:9d:ba:21:33:35:4c:d7:7a:a5:08:05:50:0d:
d8:09:59:c1:09:59:a3:a8:96:3e:5f:a0:2d:b7:c0:
51:43:77:a0:e5:53:39:e9:30:0b:33:2b:ed:5a:85:
75:ac:4b:d7:86:cb:47:a1:49:72:63:14:c7:57:c0:
da:7d:ac:32:b6:95:44:b6:54:1f:78:e5:01:7b:b1:
36:9c:cd:c4:e9:75:dc:93:4d:ee:d4:a1:2c:33:36:
6a:97:4e:69:27:97:5f:39:3e:af:57:92:30:85:46:
3c:e0:ce:33:1d:e3:1c:97:5a:8d:06:15:cf:51:c4:
f3:50:bc:fd:51:03:9a:54:b5:24:be:d3:62:d9:18:
fe:58:20:25:2f:27:f0:1d:ff:e5:a7:ab:5e:98:39:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:9E:65:CF:54:41:F7:C2:CC:29:FB:46:B8:D7:DB:E8:B9:1A:D4
X509v3 Authority Key Identifier:
keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:70:a1:0d:fb:20:56:0c:00:b0:cb:89:1b:2a:5c:93:ca:34:
66:5f:d4:8f:f8:0a:27:75:ee:0a:d8:89:eb:53:d2:3e:0d:6e:
87:5d:ee:08:4f:fb:81:e8:a3:7e:96:22:f1:a3:d8:23:3f:51:
94:be:f3:45:ad:e6:f4:e6:16:6b:7d:76:0d:35:27:61:da:8e:
41:39:4d:16:b6:88:d7:62:a6:36:eb:1a:61:cf:64:1f:5a:25:
dd:c2:12:4a:10:69:b5:db:f6:56:92:de:4c:28:dc:a4:98:73:
47:d0:1d:cf:8f:54:93:ab:1f:84:60:b8:d4:e8:60:7f:97:e2:
3f:4b:05:b6:3c:7d:bf:12:48:0c:a1:40:cb:c5:ab:e2:21:b8:
6d:c6:19:f6:1a:74:ac:07:73:46:05:33:90:62:00:ef:06:43:
4e:15:75:b5:d3:dc:38:d7:3d:27:fe:9e:6c:40:d9:36:b7:31:
0b:7b:20:d5:71:1a:0e:51:34:1a:2d:27:28:94:52:d3:cc:c9:
ce:5a:c7:a4:eb:df:fb:d9:96:85:9f:85:c2:89:aa:d1:cd:d1:
85:24:ee:dc:2b:d1:2c:86:ed:6b:bc:53:ab:ee:9d:fc:31:59:
e3:2f:e2:6d:81:5c:44:2c:71:18:0d:89:3a:14:ef:ab:56:fe:
3e:a3:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:01 2026 by rpki-client